Between the moment you press the power button and your desktop appears there is no magic: there is a chain of checks in which every link distrusts the next one before letting it carry on. That ritual ...
The password has been the weakest link in digital security for decades: it gets guessed, leaked, reused and impersonated. Against that hole come passkeys and the WebAuthn standard, which replace the &...
In 1994 the mathematician Peter Shor proved something uncomfortable: if we ever build a large enough quantum computer, the asymmetric encryption algorithms that protect the Internet today —RSA, ECDSA,...
At the door of a nightclub there is a bouncer with two questions: how old are you, and how can you prove it. The usual answer is to pull out your ID and show it, which also reveals your name, your add...
Quantum computers have been a laboratory promise for decades, but cryptography is already preparing for them as if they were arriving tomorrow. That is not paranoia: in August 2024 the NIST (the US st...
The modern phishing kit no longer settles for cloning the login screen. Tools such as Evilginx or Tycoon 2FA stand up a reverse proxy between you and the real server: every keystroke, every six-digit ...
You open your banking app, the address bar turns green and in under a second a 256-bit session key has been negotiated that not even the owner of the Wi-Fi network can decrypt. All that machinery —RSA...
If you open a website hosted in Tokyo, your data does not take the most direct cable. It may well leave Madrid for Frankfurt, hop up to Amsterdam, cross the Atlantic along a path you never imagined an...
When a site shows the padlock next to its address, what is really happening is that your browser and the server have just solved, in a fraction of a second, a problem of trust: proving who each one is...
There is an uncomfortable truth that almost no service tells you: the server where you register should not be able to know your password. If a website can show it to you under “forgot password&#...
When you open a web page, there is an invisible moment in which your browser and the server shake hands and agree on how to talk without anyone else being able to listen. That moment is the TLS handsh...
When you log into your bank from your phone, make a purchase online or send a private photo, you do not think about what happens behind the scenes. But each of those actions is a small struggle agains...